From 9275351279701b52bf65ad13e3f6e5d6572cbb11 Mon Sep 17 00:00:00 2001 From: Celes Renata Date: Tue, 21 Apr 2026 04:57:29 +0000 Subject: [PATCH] fix: beta stage uses paper DB to resolve permission denied errors Beta was pointing at stonks_beta DB where tables were owned by postgres superuser, causing permission denied for the stonks app user. Switch to sharing stonks_paper DB/user (already has proper grants). DEPLOY_STAGE=beta still isolates Redis keys and MinIO buckets. Added market data API key so beta can test ingestion when pipeline is toggled ON. --- infra/helm/stonks-oracle/values-beta.yaml | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/infra/helm/stonks-oracle/values-beta.yaml b/infra/helm/stonks-oracle/values-beta.yaml index fae7dd5..808a755 100644 --- a/infra/helm/stonks-oracle/values-beta.yaml +++ b/infra/helm/stonks-oracle/values-beta.yaml @@ -19,6 +19,9 @@ services: replicas: 1 ## Beta-specific config overrides +## Beta shares the paper DB — DEPLOY_STAGE=beta isolates Redis keys +## (stonks:beta:*) and MinIO buckets (beta-stonks-*). Pipeline defaults +## to OFF so beta won't write conflicting data unless explicitly enabled. config: DEPLOY_STAGE: "beta" LOG_LEVEL: "DEBUG" @@ -28,19 +31,22 @@ config: # Use same infra services (shared postgres/redis/minio) POSTGRES_HOST: "postgresql-rw.postgresql-service.svc.cluster.local" POSTGRES_PORT: "5432" - POSTGRES_DB: "stonks_beta" - POSTGRES_USER: "stonks" + POSTGRES_DB: "stonks_paper" + POSTGRES_USER: "stonks_paper" REDIS_HOST: "redis-master.redis-service.svc.cluster.local" REDIS_PORT: "6379" REDIS_DB: "1" MINIO_ENDPOINT: "minio.minio-service.svc.cluster.local:80" MINIO_SECURE: "false" BROKER_MODE: "paper" + BROKER_PROVIDER: "alpaca" OLLAMA_BASE_URL: "http://10.1.1.12:2701" MARKET_DATA_BASE_URL: "https://api.polygon.io" PIPELINE_DEFAULT_OFF: "true" -## Blank out all secrets so beta never talks to external APIs +## Secrets — same credentials as paper for DB/infra access. +## Broker keys blank (TRADING_ENABLED=false), market key provided +## so beta can test ingestion when pipeline is flipped ON. secrets: core: POSTGRES_PASSWORD: "St0nks0racl3!" @@ -52,7 +58,7 @@ secrets: BROKER_API_SECRET: "" BROKER_BASE_URL: "" market: - MARKET_DATA_API_KEY: "" + MARKET_DATA_API_KEY: "NPwKtrLvoBxcKt3Byp5PEvuZiBZU_d8E" ## Beta ingress — separate hostnames so beta doesn't conflict with prod ingress: